Tag: OAuth
GhostCode phish turns a device code into a Microsoft 365 takeover
GhostCode abuses Microsoft's device authorization flow to obtain tokens and register attacker hardware inside a victim tenant.
A Twitch viewer add-on slipped 31,000 session tokens to a bot service
A viewer add-on with tens of thousands of installs sent live Twitch session tokens to a commercial bot operator.
FBI flags OAuth consent phishing that survives password resets
The FBI warns OAuth consent phishing has been seizing prominent people's accounts since late 2025, and password resets do not…
Google ties three Russian crews to OAuth phishing on academics
Google tracks three suspected Russian clusters abusing OAuth and WhatsApp to hijack targeted accounts.
Critical RabbitMQ bug exposes OAuth secrets to unauthenticated attackers
A high-severity flaw in RabbitMQ lets attackers steal OAuth secrets from the management interface without authentication.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.
RabbitMQ flaws could leak OAuth secrets and expose cross-tenant queue metadata
Two RabbitMQ access control flaws could leak OAuth secrets and expose cross-tenant queue metadata
Device Code Phishing Campaigns Exploit Microsoft Authentication Flow
Cybercriminals are using Microsoft's OAuth device authorization flow to steal authentication tokens through phishing campaigns that bypass traditional security tools.